METHOD FOR PROCESSING FIRMWARE BASED ON FIRMWARE OVER THE AIR TECHNOLOGY, APPARATUS, AND SYSTEM

• US 20130111455A1
• Filed: 12/12/2012
• Published: 05/02/2013
• Est. Priority Date: 08/27/2010
• Status: Active Grant

• Current Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Inventors: JIA, Zhifeng, LEI, Peng, LI, Xiangyu, ZHONG, Ming
• Granted Patent: US 8,910,139 B2
• Time in Patent Office: Days
• US Class Current: 717/169
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 1/0061 Error detection codes
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

Embodiments of the present invention provide a method for processing firmware based on a firmware over the air technology, an apparatus, and a system. The method includes: performing check processing on at least one firmware upgrade file to form first check data; performing encryption processing on the first check data to form first encryption data; and combining the first encryption data, the first check data, and the firmware upgrade file to a firmware upgrade package, and sending the firmware upgrade package through an air interface to a mobile terminal. The apparatus includes: a checking module, an encrypting module, and a processing module. The system includes: a server and a mobile terminal. The embodiments of the present invention, by performing check, encryption, and combination processing on the firmware upgrade file, quickly implements upgrade of multiple pieces of firmware, and improves security of the mobile terminal.

Claims

1. A method for processing firmware based on a firmware over the air technology, comprising:

performing check processing on at least one firmware upgrade file to form first check data;

performing encryption processing on the first check data to form first encryption data; and

combining the first encryption data, the first check data, and the at least one firmware upgrade file to a firmware upgrade package, and sending the firmware upgrade package, through an air interface, to a mobile terminal.

2. The method for processing firmware based on the firmware over the air technology according to claim 1, wherein the performing check processing on the at least one firmware upgrade file to form the first check data comprises one step of the group consisting of:

performing cyclic redundancy check processing on the at least one firmware upgrade file to form cyclic redundancy check data as the first check data; and

performing Message-Digest Algorithm 5 (MD5) processing on the at least one firmware upgrade file to form MD5 information check data as the first check data.

3. The method for processing firmware based on the firmware over the air technology according to claim 1, wherein the performing encryption processing on the first check data to form the first encryption data comprises:

performing private key encryption on the first check data and using data that has undergone the private key encryption as the first encryption data.

4. The method for processing firmware based on the firmware over the air technology according to claim 2, wherein the performing encryption processing on the first check data to form the first encryption data comprises:

performing private key encryption on the first check data and using data that has undergone the private key encryption as the first encryption data.

5. The method for processing firmware based on the firmware over the air technology according to claim 2, wherein the performing, when the first check data is cyclic redundancy check data, the encryption processing on the first check data to form the first encryption data comprises one step of the group consisting of:

(a) performing private key encryption on the cyclic redundancy check data and the firmware upgrade file to form data that has undergone the private key encryption, wherein the data that has undergone the private key encryption comprises the cyclic redundancy check data that has undergone the private key encryption and a firmware upgrade file that has undergone the private key encryption, wherein the cyclic redundancy check data that has undergone the private key encryption is the first encryption data, and the firmware upgrade file comprised in the firmware upgrade package is the firmware upgrade file that has undergone the private key encryption; and

(b) performing the MD5 processing on the cyclic redundancy check data to form MD5 information corresponding to the cyclic redundancy check data, and performing the private key encryption on the MD5 information to form the first encryption data.

6. The method for processing firmware based on the firmware over the air technology according to claim 1, before the performing check processing on at least one firmware upgrade file, further comprising:

obtaining multiple firmware upgrade files, wherein the firmware upgrade package comprises the obtained multiple firmware upgrade files.

7. A method for upgrading firmware based on a firmware over the air technology, comprising:

receiving, through an air interface, a firmware upgrade package sent by a server, and storing the firmware upgrade package in a cache partition;

reading the firmware upgrade package stored in the cache partition, wherein the firmware upgrade package comprises;

first encryption data, first check data, and a firmware upgrade file;

performing decryption on the first encryption data in the firmware upgrade package to form second check data; and

when the second check data is consistent with the first check data, performing an upgrade operation on a corresponding firmware according to the firmware upgrade file in the firmware upgrade package.

8. The method for upgrading firmware based on a firmware over the air technology according to claim 7, wherein the reading the firmware upgrade package stored in the cache partition comprises:

traversing the cache partition to obtain file headers corresponding to the firmware upgrade package;

selecting, from the file headers corresponding to the firmware upgrade package, a valid file header as a target file header; and

reading, according to an identity in the target file header, data packets corresponding to the identity, and arranging the data packets corresponding to the identity to form the firmware upgrade package.

9. The method for upgrading firmware based on a firmware over the air technology according to claim 8, wherein the selecting, from the file headers corresponding to the firmware upgrade package, the valid file header as the target file header comprises:

selecting, from valid file headers corresponding to the firmware upgrade package, a file header with a maximum block number as the target file header;

when the file header with the maximum block number comprises multiple file headers whose block numbers are the same, selecting, from the multiple file headers, a file header that has a maximum flash address as the target file header.

10. The method for upgrading firmware based on a firmware over the air technology according to claim 7, wherein the performing decryption on the first encryption data in the firmware upgrade package to form the second encryption data comprises:

performing public key decryption on the first encryption data in the firmware upgrade package and using decrypted data as the second check data.

11. The method for upgrading firmware based on a firmware over the air technology according to claim 10, after the performing decryption on the first encryption data in the firmware upgrade package to form the second check data, further comprising one step of the group consisting of:

(a) when the first check data is cyclic redundancy check data, and the first encryption data is data obtained after private key encryption is performed on the cyclic redundancy check data, directly comparing the second check data and the first check data to determine whether the second check data and the first check data they are the same;

(b) when the first check data is Message-Digest Algorithm 5 (MD5) information check data, and the first encryption data is data obtained after the private key encryption is performed on the MD5 information check data, directly comparing the second check data and the first check data to determine whether the second check data and the first check data are the same; and

(c) when the first check data is the cyclic redundancy check data, and the first encryption data is data obtained after the private key encryption is performed on MD5 information corresponding to the cyclic redundancy check data, performing MD5 processing on the cyclic redundancy check data in the firmware upgrade package to form second MD5 information, and verifying whether the second check data is consistent with the second MD5 information, wherein the second check data is MD5 information formed after decryption of the first encryption data in the firmware upgrade package.

12. The method for upgrading firmware based on a firmware over the air technology according to claim 7, before the performing the upgrade operation on corresponding firmware according to the firmware upgrade file in the firmware upgrade package, further comprising:

performing check processing on the firmware upgrade file to form third check data;

verifying whether the third check data is consistent with the first check data in the firmware upgrade package;

if the third check data is consistent with the first check data in the firmware upgrade package, performing the upgrade operation on the corresponding firmware according to the firmware upgrade file in the firmware upgrade package; and

if the third check data is not consistent with the first check data in the firmware upgrade package, discarding the firmware upgrade file without performing the upgrade operation on the corresponding firmware according to the firmware upgrade file.

13. The method for upgrading firmware based on a firmware over the air technology according to claim 8, before the performing the upgrade operation on corresponding firmware according to the firmware upgrade file in the firmware upgrade package, further comprising:

performing check processing on the firmware upgrade file to form third check data;

verifying whether the third check data is consistent with the first check data in the firmware upgrade package;

if the third check data is consistent with the first check data in the firmware upgrade package, performing the upgrade operation on the corresponding firmware according to the firmware upgrade file in the firmware upgrade package;

if the third check data is not consistent with the first check data in the firmware upgrade package, discarding the firmware upgrade file without performing the upgrade operation on the corresponding firmware according to the firmware upgrade file.

14. The method for upgrading firmware based on a firmware over the air technology according to claim 9, before the performing the upgrade operation on corresponding firmware according to the firmware upgrade file in the firmware upgrade package, further comprising:

performing check processing on the firmware upgrade file to form third check data;

verifying whether the third check data is consistent with the first check data in the firmware upgrade package;

if the third check data is consistent with the first check data in the firmware upgrade package, performing the upgrade operation on the corresponding firmware according to the firmware upgrade file in the firmware upgrade package;

if the third check data is not consistent with the first check data in the firmware upgrade package, discarding the firmware upgrade file without performing the upgrade operation on the corresponding firmware according to the firmware upgrade file.

15. The method for upgrading firmware based on a firmware over the air technology according to claim 10, before the performing the upgrade operation on corresponding firmware according to the firmware upgrade file in the firmware upgrade package, further comprising:

performing check processing on the firmware upgrade file to form third check data;

verifying whether the third check data is consistent with the first check data in the firmware upgrade package;

if the third check data is consistent with the first check data in the firmware upgrade package, performing the upgrade operation on the corresponding firmware according to the firmware upgrade file in the firmware upgrade package; and

if the third check data is not consistent with the first check data in the firmware upgrade package, discarding the firmware upgrade file without performing the upgrade operation on the corresponding firmware according to the firmware upgrade file.

16. The method for upgrading firmware based on a firmware over the air technology according to claim 11, before the performing the upgrade operation on corresponding firmware according to the firmware upgrade file in the firmware upgrade package, further comprising:

performing check processing on the firmware upgrade file to form third check data;

verifying whether the third check data is consistent with the first check data in the firmware upgrade package;

if the third check data is consistent with the first check data in the firmware upgrade package, performing the upgrade operation on the corresponding firmware according to the firmware upgrade file in the firmware upgrade package; and

if the third check data is not consistent with the first check data in the firmware upgrade package, discarding the firmware upgrade file without performing the upgrade operation on the corresponding firmware according to the firmware upgrade file.